Oval Definition:oval:com.ubuntu.precise:def:20167099000
Revision Date:2016-10-10Version:1
Title:CVE-2016-7099 on Ubuntu 12.04 LTS (precise) - medium.
Description:The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-7099
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The vulnerability of the 'nodejs' package in precise is not known (status: 'needs-triage'). It is pending evaluation.
    • BACK